diff options
| author | Laszlo Attila Toth <panther@balabit.hu> | 2009-05-02 00:23:10 +0200 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2009-05-02 00:23:10 +0200 |
| commit | acda074390270ca9e28f2a9729f7b835e2ad6da4 (patch) | |
| tree | ebce90f2a5e91ab7c4a2467c58abbc67091e1da3 /net | |
| parent | bonding: bond_slave_info_query() fix (diff) | |
| download | linux-acda074390270ca9e28f2a9729f7b835e2ad6da4.tar.xz linux-acda074390270ca9e28f2a9729f7b835e2ad6da4.zip | |
xt_socket: checks for the state of nf_conntrack
xt_socket can use connection tracking, and checks whether it is a module.
Signed-off-by: Laszlo Attila Toth <panther@balabit.hu>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net')
| -rw-r--r-- | net/netfilter/Kconfig | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/net/netfilter/Kconfig b/net/netfilter/Kconfig index 881203c4a142..cb3ad741ebf8 100644 --- a/net/netfilter/Kconfig +++ b/net/netfilter/Kconfig @@ -837,6 +837,7 @@ config NETFILTER_XT_MATCH_SOCKET depends on NETFILTER_TPROXY depends on NETFILTER_XTABLES depends on NETFILTER_ADVANCED + depends on !NF_CONNTRACK || NF_CONNTRACK select NF_DEFRAG_IPV4 help This option adds a `socket' match, which can be used to match |